by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent and implements a local logging/utility CLI. Before installing or running: (1) review scripts/script.sh yourself (it will create ~/.local/share/macos-toolkit and write logs there); (2) be aware any sensitive text you pass to the tool will be stored in those log files and included in exports; (3) note the package metadata has no homepage/source repository listed—if you need stronger provenance, ask the publisher for a repository or signed release before trusting it. Als...详细分析 ▾
✓ 用途与能力
Name/description describe a local macOS CLI for recording and exporting entries. The included script implements those commands and stores data under ~/.local/share/macos-toolkit. Nothing in the files asks for unrelated cloud credentials, unusual binaries, or system-level privileges.
✓ 指令范围
SKILL.md and scripts/script.sh are consistent: commands operate only on per-user data files in the DATA_DIR, print to stdout, and use standard Unix utilities (date, wc, du, tail, grep, sed, cat). The instructions do not direct the agent to read unrelated system files, contact external endpoints, or exfiltrate secrets.
✓ 安装机制
No install spec is provided (instruction-only with a bundled script). Nothing is downloaded or extracted; no external package installs are requested.
✓ 凭证需求
The skill requests no environment variables or credentials. The script uses HOME to derive a per-user data directory (expected for a local CLI). There are no unexplained SECRET/TOKEN requirements.
✓ 持久化与权限
always is false and the skill does not modify other skills or system-wide settings. It creates and writes only to its own data directory under the user's home directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/20
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install macos-toolkit
镜像加速npx clawhub@latest install macos-toolkit --registry https://cn.longxiaskill.com